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CLAIMS 

1 . A system for securing a private network of computer resources accessible to 
users of an external communications network, comprising: 

a private network gateway, and 
5 a circuit switch; 

the private network gateway connected in series with the circuit switch between the 
external communications network and the private network, and the private network gateway 
including an intruder detector which produces an alarm output when intruder activity is 
detected; and 

10 the circuit switch selectively disconnecting the external communications network 

from the private network responsive to the alarm output of the intruder detector. 

2. The system of claim 1, further comprising: 

a decoy computer resource connected to the circuit switch; 
15 the circuit switch selectively connecting the private network gateway to the decoy 

computer resource responsive to the alarm output of the intruder detector. 

3 . The system of claim 2, wherein the circuit switch transfers the connection of 
the private network gateway from the private network to the decoy computer resource in a 

20 time period not noticeable to a human user. 

4. The system of claim 3, wherein the time period is less than 100 mS. 

5. The system of claim 4, wherein the time period is less than 1 00 uS. 

25 

6. The system of claim 5, wherein the time period is less than 100 nS. 

7. The system of claim 6, wherein the time period is about 90 nS. 

30 8. The system of claim 1 , wherein the circuit switch connects a digital input 

signal to a digital output signal through a digital circuit switch matrix. 

9. The system of claim 1, wherein the circuit switch connects an input signal to 
an output signal through an analog circuit switch matrix. 
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1 0. The system of claim 1 , wherein the circuit switch connects an optical input 
signal to an optical output signal through an optical circuit switch matrix. 

5 11. The system of claim 1 , wherein the circuit switch is located on premises 

containing equipment of the external communications network. 

12. The system of claim 1, wherein the circuit switch is located on premises 
containing equipment of the private network. 

10 

13. A method of securing a private network of computer resources accessible to 
users of an external communications network, comprising: 

detecting an intruder to the private network from the external communications 
network; 

15 generating an alarm signal responsive to the step of detecting; and 

reconnecting the intruder from the private network to a decoy resource in a time 
period not noticeable to the intruder. 

1 4. The system of claim 13, wherein the time period is less than 1 00 mS. 

20 

15. The system of claim 14, wherein the time period is less than 100 p.S. 

1 6. The system of claim 1 5, wherein the time period is less than 1 00 nS. 
25 17. The system of claim 1 6, wherein the time period is about 90 nS. 
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